33 	size_t size = 123;  in kmalloc_oob_right()  local
36 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_right()
42 	ptr[size] = 'x';  in kmalloc_oob_right()
49 	size_t size = 15;  in kmalloc_oob_left()  local
52 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_left()
65 	size_t size = 4096;  in kmalloc_node_oob_right()  local
68 	ptr = kmalloc_node(size, GFP_KERNEL, 0);  in kmalloc_node_oob_right()
74 	ptr[size] = 0;  in kmalloc_node_oob_right()
82 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_oob_right()  local
88 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_oob_right()
94 	ptr[size] = 0;  in kmalloc_pagealloc_oob_right()
101 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_uaf()  local
104 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_uaf()
117 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_invalid_free()  local
120 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_invalid_free()
133 	size_t size = KMALLOC_MAX_CACHE_SIZE - 256;  in kmalloc_large_oob_right()  local
138 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_large_oob_right()
144 	ptr[size] = 0;  in kmalloc_large_oob_right()
208 	size_t size = 8;  in kmalloc_oob_memset_2()  local
211 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_2()
224 	size_t size = 8;  in kmalloc_oob_memset_4()  local
227 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_4()
241 	size_t size = 8;  in kmalloc_oob_memset_8()  local
244 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_8()
257 	size_t size = 16;  in kmalloc_oob_memset_16()  local
260 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_16()
273 	size_t size = 666;  in kmalloc_oob_in_memset()  local
276 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_in_memset()
282 	memset(ptr, 0, size+5);  in kmalloc_oob_in_memset()
289 	size_t size = 10;  in kmalloc_uaf()  local
292 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf()
305 	size_t size = 33;  in kmalloc_uaf_memset()  local
308 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf_memset()
315 	memset(ptr, 0, size);  in kmalloc_uaf_memset()
321 	size_t size = 43;  in kmalloc_uaf2()  local
324 	ptr1 = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf2()
331 	ptr2 = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf2()
346 	size_t size = 8;  in kfree_via_page()  local
351 	ptr = kmalloc(size, GFP_KERNEL);  in kfree_via_page()
365 	size_t size = 8;  in kfree_via_phys()  local
369 	ptr = kmalloc(size, GFP_KERNEL);  in kfree_via_phys()
382 	size_t size = 200;  in kmem_cache_oob()  local
384 						size, 0,  in kmem_cache_oob()
398 	*p = p[size];  in kmem_cache_oob()
407 	size_t size = 200;  in memcg_accounted_kmem_cache()  local
410 	cache = kmem_cache_create("test_cache", size, 0, SLAB_ACCOUNT, NULL);  in memcg_accounted_kmem_cache()
458 	size_t size = 123, real_size;  in ksize_unpoisons_memory()  local
461 	ptr = kmalloc(size, GFP_KERNEL);  in ksize_unpoisons_memory()
468 	ptr[size] = 'x';  in ksize_unpoisons_memory()
478 	size_t size = 10;  in copy_user_test()  local
481 	kmem = kmalloc(size, GFP_KERNEL);  in copy_user_test()
495 	unused = copy_from_user(kmem, usermem, size + 1);  in copy_user_test()
498 	unused = copy_to_user(usermem, kmem, size + 1);  in copy_user_test()
501 	unused = __copy_from_user(kmem, usermem, size + 1);  in copy_user_test()
504 	unused = __copy_to_user(usermem, kmem, size + 1);  in copy_user_test()
507 	unused = __copy_from_user_inatomic(kmem, usermem, size + 1);  in copy_user_test()
510 	unused = __copy_to_user_inatomic(usermem, kmem, size + 1);  in copy_user_test()
513 	unused = strncpy_from_user(kmem, usermem, size + 1);  in copy_user_test()
542 	size_t size = 200;  in kmem_cache_double_free()  local
545 	cache = kmem_cache_create("test_cache", size, 0, 0, NULL);  in kmem_cache_double_free()
566 	size_t size = 200;  in kmem_cache_invalid_free()  local
569 	cache = kmem_cache_create("test_cache", size, 0, SLAB_TYPESAFE_BY_RCU,  in kmem_cache_invalid_free()
598 	size_t size = 24;  in kasan_memchr()  local
601 	ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO);  in kasan_memchr()
605 	memchr(ptr, '1', size + 1);  in kasan_memchr()
612 	size_t size = 24;  in kasan_memcmp()  local
616 	ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO);  in kasan_memcmp()
621 	memcmp(ptr, arr, size+1);  in kasan_memcmp()
628 	size_t size = 24;  in kasan_strings()  local
631 	ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO);  in kasan_strings()
738 	size_t size = 16;  in kmalloc_double_kzfree()  local
741 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_double_kzfree()